Qbit and Bytechip Face Class Action Over $28 Million Crypto Scam
UAB Qbit Financial Service, Bytechip LLC, and CEO Yujun Wu are accused of orchestrating or knowingly facilitating a pig butchering cryptocurrency scam that defrauded thousands of victims of an estimated $28 million through complex laundering networks.
A class action lawsuit alleges that Qbit Financial Service, its alter ego Bytechip LLC, and CEO Yujun Wu participated in a massive pig butchering cryptocurrency scam. Victims were lured through fake work and investment schemes into transferring cryptocurrency to scammer-controlled wallets. Forensic analysis traced stolen funds through a complex laundering network to Qbit-owned wallets on cryptocurrency exchanges. The defendants allegedly received and concealed stolen cryptocurrency, enabling criminals to convert digital assets into fiat currency and permanently depriving thousands of victims of their funds.
Continue reading to understand how this alleged scheme operated, the evidence connecting stolen funds to Qbit-controlled wallets, and the broader vulnerabilities in cryptocurrency regulation that enabled this fraud.
The Allegations: A Breakdown
| 01 | Defendants Qbit, Bytechip, and Yujun Wu engaged in a pig butchering scheme with co-conspirators to steal cryptocurrency from victims through fraudulent investment and work platforms. Scammers using aliases like Olivia Ava, Emma Miller, and F.B. Lee contacted victims via WhatsApp with boilerplate inquiries about online work or investment opportunities. | high |
| 02 | Scammers lured victims to transfer cryptocurrency by promising significant income from seemingly legitimate tasks for companies like Grayphite and Resy, then systematically extracted larger sums using fake account balances, fabricated fees, and threats. Victims were eventually blocked from accessing their accounts and lost all transferred funds. | high |
| 03 | Forensic analysis by Inca Digital traced stolen funds through a complex laundering network of 238 deposit wallets, 13 pivot wallets, and multiple blockchain bridges to destination wallets controlled by Qbit on cryptocurrency exchanges. At least $1 million in traceable victim funds ended up in Qbit’s THGTen Destination Wallet. | high |
| 04 | Qbit’s THGTen wallet received $250 million USDT between March and June 2024, nearly all from the Cregis Master Wallet which Qbit admitted owning. Despite claims of legitimate business use, the wallet averaged only 1.66 transfers per day, inconsistent with active client trading. | high |
| 05 | Defendants allegedly knew or should have known the funds were stolen. Blockchain analysis revealed Qbit-controlled wallets interacted with 28 reported scam addresses and 10 fraud shops, and the Cregis Master Wallet received transaction fees from an address tagged as a scam wallet by Chainalysis. | high |
| 06 | When Qbit sought to unfreeze the THGTen wallet in Alabama court, it made misleading statements and omitted key facts. Qbit relied solely on CEO Yujun Wu’s declaration containing vague and unsupported claims, and failed to disclose that Interlace, cited as evidence of legitimacy, was actually owned by Wu and shared infrastructure with Qbit. | high |
| 07 | Bytechip, doing business as Qbit and QbitPay, previously forfeited $1,215,221.99 in a DOJ civil forfeiture action where prosecutors alleged its accounts provided money laundering infrastructure to a large wire fraud scheme and that it was part of a fraud conspiracy ring with no indicia of legitimacy. | high |
| 08 | Defendants used sophisticated laundering techniques including exchange hopping, staggering transactions into smaller amounts, and commingling stolen funds with other sources through intermediary wallets. This complex web was designed to obscure the origin of stolen cryptocurrency and frustrate attempts to trace and recover funds. | high |
| 01 | The cryptocurrency market has outpaced effective global regulation, creating an environment where scammers operate across borders with relative ease using complex digital wallet networks. The decentralized and often anonymous nature of cryptocurrency transactions presents significant challenges for law enforcement. | high |
| 02 | Banking-as-a-Service platforms like Qbit can operate with less stringent Anti-Money Laundering and Know Your Customer protocols, especially in jurisdictions with weaker regulatory frameworks. This enables illicit actors to use these platforms as crucial nodes for laundering stolen cryptocurrency. | high |
| 03 | International operations allow perpetrators to shift activities across jurisdictions when one attempts enforcement, exploiting varying legal standards and enforcement capacities. Myanmar, where many scam compounds operate, is one of only three countries on the FATF money laundering blacklist. | high |
| 04 | The use of pivot wallets, blockchain bridges, and techniques like staggering and commingling are designed to frustrate law enforcement tracing efforts. While blockchain offers a public ledger, the anonymity of wallet holders and transaction complexity make linking addresses to real identities difficult without significant resources. | medium |
| 05 | Corporate structures spanning multiple jurisdictions complicate accountability. Qbit is a Lithuanian LLC, Bytechip is registered in Delaware and California, and principal Yujun Wu operates across entities with connections in China and the US, creating geographic and corporate dispersion that hinders legal action and regulatory oversight. | medium |
| 01 | Qbit allegedly identified a lucrative opportunity in under-regulated cryptocurrency markets by providing services essential for criminals to convert stolen digital assets into usable wealth. The business model appears to prioritize profit from processing large volumes of cryptocurrency over ethical considerations about fund origins. | high |
| 02 | The THGTen wallet processed $250 million USDT in just three months with minimal daily transaction activity, raising questions about legitimate use claims. Such patterns, combined with previous forfeiture actions against Bytechip, suggest potential prioritization of financial gain from questionable sources. | high |
| 03 | Defendants allegedly fought to unfreeze and regain access to stolen funds through misleading court filings, demonstrating a powerful incentive structure where accumulation of capital takes precedence regardless of origin. This willingness to commingle stolen funds with other assets underscores profit-driven decision making. | high |
| 04 | The alleged provision of laundering services to criminals represents a business model where ethical considerations and human cost of financial devastation are secondary or ignored. Qbit’s role as an off-ramp for converting stolen crypto enabled the scam’s profitability by making illicit proceeds accessible to criminals. | high |
| 01 | The scheme siphoned an estimated $28 million from plaintiff Michael Mashkevich and thousands of class members. Individual victims like Mashkevich lost approximately $90,000, representing potential life savings, retirement funds, or money for critical needs. | high |
| 02 | Once cryptocurrency is successfully laundered and converted to fiat currency, victims have no realistic path to recovery. The permanent loss of funds can be catastrophic for individuals, causing complete financial ruin. | high |
| 03 | FBI estimates show pig butchering scams cost Americans $5.3 billion in 2023 alone with 40,000 reported victims. Accounting for underreporting, actual annual losses likely exceed $20 billion, representing massive wealth transfer to criminal enterprises with significant negative economic consequences. | high |
| 04 | Prevalence of such large-scale fraud erodes trust in emerging financial technologies, potentially hindering legitimate innovation and adoption. Resources expended by victims attempting recovery, law enforcement investigating, and courts processing cases represent significant societal costs. | medium |
| 05 | The fight to freeze and recover assets through court proceedings is costly and uncertain for victims. Even when assets are identified and frozen, defendants employ legal maneuvers to unfreeze them, as Qbit attempted in Alabama court. | medium |
| 01 | The scammers themselves are often victims of human trafficking, lured with false promises of legitimate jobs like customer service or IT work. Targeted individuals from vulnerable populations in Southeast Asia, China, and Africa have passports and phones confiscated upon arrival at scam compounds. | high |
| 02 | Trafficked workers are forced to work in pig butchering operations under duress, facing violence and threats. A Vietnamese teenager promised a job teaching online gaming was sent to a basement to scam people, beaten when she tried to contact family, and sold to another organization. | high |
| 03 | NGOs estimate 300,000 people are held against their will in scam compounds surrounded by armed guards. Seven out of ten women escaping these operations report sexual assault, according to NGOs working on the ground in Southeast Asia. | high |
| 04 | Criminal masterminds behind these scams, including the Chinese 14K Triad and Karen Border Guard Force, are perpetrating horrific human rights abuses by turning trafficking victims into unwilling perpetrators. This exploitation is a critical component of the pig butchering ecosystem. | high |
| 01 | Despite detailed forensic analysis tracing millions in stolen funds to Qbit-controlled wallets, achieving justice remains arduous. The structure of operations utilizing shell companies across multiple jurisdictions creates significant hurdles for legal and regulatory bodies. | high |
| 02 | Even when assets are identified and frozen, defendants employ legal maneuvers to unfreeze them. The Alabama court’s seven-month delay before Qbit challenged the injunction, and the ongoing uncertainty about whether frozen funds will be recovered, demonstrates accountability challenges. | high |
| 03 | The previous Bytechip forfeiture action resulted in only $1.2 million seized, a fraction of funds initially targeted, and did not lead to criminal charges or cessation of suspicious activities. This partial accountability failed to prevent subsequent alleged involvement in the current $28 million scheme. | high |
| 04 | If stolen funds are successfully converted to fiat currency and dissipated, recovery becomes nearly impossible, leaving victims with little recourse. The burden falls on victims themselves to initiate costly legal actions, as plaintiff Mashkevich did. | high |
| 05 | Global and unregulated nature of cryptocurrency exchanges means enforcement relies on entity cooperation, which varies widely. Current systems of corporate accountability can fail when faced with sophisticated, technologically advanced, international financial crime. | medium |
| 01 | When Qbit faced frozen assets, it filed a motion relying on CEO Yujun Wu’s declaration that contained vague and conclusory statements lacking documentary support. The motion attempted to portray operations as legitimate and frozen funds as honestly acquired. | high |
| 02 | Qbit falsely characterized a settlement offer as a ransom payment demand, when it was actually made at the request of Qbit’s own Hong Kong counsel. This misrepresentation aimed to paint the plaintiff as unreasonable. | high |
| 03 | Despite claiming to lose $6,000 daily due to frozen funds, Qbit waited seven months to challenge the injunction and provided no proof of borrowing money at high interest rates or details of alleged loans to repay customers. | medium |
| 04 | Qbit claimed funds came from Interlace account holders screened through quality assurance procedures but concealed that Interlace is owned by the same CEO Yujun Wu and shares identical digital infrastructure including HTML code and analytics identifiers. Wu’s declaration omitted his role as Interlace CEO. | high |
| 05 | Qbit asserted it uses OKX accounts for client payment and trading services, but analysis showed the THGTen wallet averaged only 1.66 transfers per day despite receiving $250 million. This contradicts claims of active legitimate business use. | medium |
| 01 | The $28 million stolen from numerous individuals represents a significant wealth transfer to orchestrators and facilitators of fraud. If allegations hold true, Qbit and Yujun Wu stood to gain considerably by providing financial infrastructure for scam success and laundering. | high |
| 02 | Qbit’s THGTen wallet saw inflows of $250 million USDT within three months, nearly all from the Cregis Master Wallet also owned by Qbit. Such massive sums flowing through accounts linked to a company accused of facilitating fraud highlight immense potential profits from criminal activities. | high |
| 03 | Methods of luring victims with high return promises, systematically extracting funds, and laundering through complex networks are predatory. This predation disproportionately affects less financially savvy individuals seeking economic improvement, making them susceptible to sophisticated deception. | high |
| 04 | The accumulation of wealth in the hands of a few at direct expense of many is characteristic of unchecked corporate greed. The broader context involves a global system where financial innovation in less regulated sectors can be co-opted for illicit wealth accumulation, exacerbating existing inequalities. | medium |
| 01 | This lawsuit is more than a dispute over stolen millions. It reveals how technological advancement coupled with insufficient regulatory oversight and relentless profit pursuit can inflict devastating harm on ordinary individuals, destroying financial security and trust. | high |
| 02 | The case underscores urgent need for robust and adaptive regulatory frameworks for cryptocurrencies and digital financial services globally, with enhanced international cooperation to combat cross-border financial crime and stronger corporate accountability measures. | high |
| 03 | The human cost extends beyond direct financial victims to include trafficked individuals forced to perpetrate scams. As financial landscapes evolve, collective efforts must ensure innovation serves humanity rather than becoming a tool for exploitation. | high |
| 04 | The pig butchering crisis is not isolated but an international phenomenon affecting tens of thousands annually with billions in losses. The systematic nature of this predation, leveraging global internet and cryptocurrency reach, demands coordinated worldwide response. | medium |
Timeline of Events
Direct Quotes from the Legal Record
“Based on my training and experience, I know . . . Bytechip[‘s] Solidfi vAccount **1162 [is] used to provide money laundering infrastructure to a large wire fraud scheme perpetrated against numerous individuals. Bytechip LLC, Gatcha Pictures, and Paralel Design are entities interconnected through IP addresses, outgoing debit transfers, and intrabank transfers of funds, each performing an important function in a large fraud conspiracy ring. None of these entities bears any indicia of legitimacy in its operations.”
๐ก Federal prosecutors previously alleged Bytechip, Qbit’s alter ego, operated as money laundering infrastructure with no legitimate business purpose
“I have demonstrated that wire fraud proceeds from pig butchering victims are frozen in . . . Bytechip Solidfi vAccount **1162, and that these accounts are used to launder the proceeds of wire fraud.”
๐ก Government prosecutors directly linked Bytechip accounts to laundering pig butchering scam proceeds
“We have literally never seen a world crisis like this. We’ve got Americans and people all over the world who’ve lost all their money. . . . [W]e have human trafficked victims that are forced to do this dirty work . . . . And when they get there, their passports are seized, they’re put in buses and they are moved to these compounds where they are surrounded with men with AK47s . . . . The NGOs that I spoke with on the ground in Southeast Asia told me 7 out of 10 women are coming out of there saying that they were sexually assaulted . . . . 300,000 [people] estimated by the United States Institute of Peace are behind held against their will.”
๐ก Former prosecutor confirms the international scope and human trafficking dimension fueling these scam operations
“Lee told Plaintiff his ‘credit score’ on the platform had dropped to 80%, and he needed to restore his score to access his cryptocurrency. Plaintiff that had two options to restore his credit score. Option 1 was to pay $20,000 ($1,000 per point to restore) and reset his credit score immediately. Option 2 was he could wait 10 months for his score to return to 100%. To induce Plaintiff’s further deposits, Lee offered to help financially with Option 1.”
๐ก Shows the systematic psychological manipulation and fake fee structures scammers used to extract increasing amounts from victims
“After the Scammers persuaded Class Members to deposit additional cryptocurrency, they transferred it along a wellestablished scam cryptocurrency laundering networkโcontrolled by Defendants or their coconspiratorsโ(the ‘Laundering Network’) until it arrived at destination wallets held at cryptocurrency exchanges”
๐ก Describes the deliberate creation of transaction complexity to obscure stolen fund origins and destinations
“A significant portion of the stolen funds are directly traceable to the OKX cryptocurrency exchange at address THGTenLmvqWycGLGtgRvX4wURiHQeDvNps (‘the THGTen Destination Wallet’ or ‘THGTen’). By their own admission, Qbit owns and controls this wallet.”
๐ก Establishes direct connection between victim funds and Qbit-controlled cryptocurrency wallet through blockchain analysis
“Qbit filed a nonparty motion to dissolve or modify the preliminary injunction order, claiming that the court did not have jurisdiction to impose its injunction and that the funds contained in the THGTen Destination Wallet were legitimate. As evidence of Qbit’s legitimacy, they relied solely on a declaration of their CEO Yujun Wu. The declaration is full of vague and conclusory statements that are demonstrably misleading and lack any documentary support.”
๐ก Highlights Qbit’s attempt to use misleading statements to regain access to frozen funds linked to fraud
“Despite their reliance on Interlace to bolster their credibility and assuage concerns of money laundering, they failed to disclose that Interlace is deeply intertwined with Qbit, including that they share significant digital infrastructure and the same founder and CEO, Defendant Wu.”
๐ก Reveals deliberate omission of material fact about related entity used to create false appearance of independent verification
“The THGTen Destination Wallet has exposure to 53 different reported scam addresses and 10 different reported fraud shops… The THGTen Destination Wallet is also within 3 hops of two entities sanctioned by the US Treasury Department’s Office of Foreign Assets Control (OFAC).”
๐ก Demonstrates extensive connections between Qbit wallet and known criminal operations through on-chain analysis
“Once transferred, the Scammers launder the funds through a complex web of related transactions via a well-established scam network of related wallets. The victims suffer a total loss of their cryptocurrency and the funds used to purchase it.”
๐ก Emphasizes the finality of victim losses once funds enter the laundering network and are converted to fiat currency
“Despite Qbit’s claim that it uses its OKX accounts for clients’ ‘payment purposes’ and ‘to provide trading services,’ the wallet averaged only 1.66 transfers per day, suggesting that the account is not actively engaged in transactional activity.”
๐ก Statistical evidence contradicts Qbit’s claims of legitimate high-volume business use for the wallet
“The Scammers first solicit victims by sending boilerplate inquiries about investment opportunities or part-time work. After a person responds to a message, one or more Scammers contact that person and describe the opportunities, all of which have the purported potential of earning the victim significant income by completing seemingly legitimate work tasks for well-known companies or by making seemingly legitimate investments.”
๐ก Details the standardized initial contact approach used to identify and engage potential victims
“The international crime syndicates operating these scams include but are not limited to the Chinese 14K Triad and the Karen Border Guard Force. Wan Kuok-Koi a/k/a ‘Broken Tooth’ is a reputed Chinese mafia boss who has been sanctioned by the U.S. Government. He is the former head of the Chinese 14K Triad.”
๐ก Identifies organized crime groups operating scam compounds and their connections to sanctioned individuals
“Myanmar has become the prime destination for criminal groups, where money laundering and online scam operations relocated after several governments in southeast Asia cracked down on criminal gangs. Notably, Myanmar is one of only three countries on the FATF money laundering and terrorist financing black list, along with North Korea and Iran.”
๐ก Explains how criminals exploit jurisdictions with weak anti-money laundering enforcement to operate scam infrastructure
“Qbit formerly operated as Bytechip. Defendant Bytechip did business as Qbit, was owned by Qbit’s executive officer, Yujun Wu, and had an office at the same address as Qbit: 2381 Zanker Rd, Ste 110, San Jose CA 95131.”
๐ก Establishes the intertwined nature of corporate entities allegedly used to obscure ownership and accountability
Frequently Asked Questions
๐ก Explore Corporate Misconduct by Category
Corporations harm people every day โ from wage theft to pollution. Learn more by exploring key areas of injustice.
- ๐ Product Safety Violations โ When companies risk lives for profit.
- ๐ฟ Environmental Violations โ Pollution, ecological collapse, and unchecked greed.
- ๐ผ Labor Exploitation โ Wage theft, worker abuse, and unsafe conditions.
- ๐ก๏ธ Data Breaches & Privacy Abuses โ Misuse and mishandling of personal information.
- ๐ต Financial Fraud & Corruption โ Lies, scams, and executive impunity.